4 ms·
Hi, I’m Sophie and I work at Facebook. The behavior here was not intentional, and we deployed a fix today so that a login that fails 2FA (even with a correct p
by spicyj 9y ago
Hi, I’m Sophie and I work at Facebook.
The behavior here was not intentional, and we deployed a fix today so that a login that fails 2FA (even with a correct password) will not result in the reactivation of a deactivated account.
Thanks for noticing this bug and posting!
- J-dawg 9y agoThanks. I'm not the greatest fan of your employer/product but it's great that you are responsive to stuff like this. Out of curiosity, is the inability to log in with recovery codes also a bug? The help page I linked to explains the process for getting recovery codes, but when I was attempting to log in I couldn't find any option to actually use one. The 2FA input wouldn't accept an 8 digit code. Maybe I was missing something obvious. Perhaps this is something that only happens with deactivated accounts? (Although people with deactivated accounts are arguably the group most likely to need recovery codes).
- spicyj 9y agoThe usual 2FA input should work. Do you mind mailing me (username sophiebits, domain fb.com) your email or a link to your FB profile so I can have someone look into this? A screenshot of the input field that you see would also be helpful.
- J-dawg 9y agoI have now requested to delete the profile and entered the 14 day waiting period so I'm not really minded to reactivate it just to investigate this, sorry! Thanks again for getting in touch.